SSL Certificate Expiry Monitor

SSL Certificate Expiry Monitor is a bulk SSL certificate checker: for each domain you get validity, issuer, expiry date, days left, TLS version and SANs, with EXPIRED, EXPIRING_SOON and INVALID flags.

Best for: Monitoring merchant, checkout and API domains, agencies managing many client sites, and DevOps teams avoiding surprise certificate expiry.

How to check SSL certificate expiry in bulk

1. Add domains to Domains (a port is optional, e.g. example.co.uk:8443).
2. Set Warn when expiring within (days) and turn on Only output problems.
3. Save as a task, schedule it daily and connect Slack, email or a webhook for alerts.

How it works

Makes one standard TLS handshake per domain, the same as a browser opening the site. No scanning or other requests. Certificates are verified against the standard trust store. Unreachable hosts and bad input are reported (UNREACHABLE / INVALID_INPUT) and not charged. Schedule it daily and use onlyProblems to get alerts via Apify integrations (Slack, email, webhooks).

Output

domain, status, daysLeft, notAfter, issuer, tlsVersion, verifyError, sans, ok

Pricing (pay-per-event)

• domain-checked: $0.0003 per result ($0.3 / 1,000). Platform usage is included; you pay only for results.
• Example: 10,000 domains cost $3.00.

Example input

{
  "domains": [
    "stripe.com",
    "checkout.example.co.uk:8443"
  ],
  "warnDays": 21,
  "onlyProblems": true
}

Example output

Values below are illustrative.

{
  "domain": "example.com",
  "status": "OK",
  "daysLeft": 73,
  "notAfter": "2026-12-25T22:56:35Z",
  "issuer": "SSL Corporation",
  "tlsVersion": "TLSv1.3",
  "verifyError": null,
  "sans": [
    "example.com"
  ],
  "ok": true
}

Use it via API, schedules and integrations

Run it in Apify Console, or call it from your own code with the Apify API or the Python and JavaScript clients. Save an input as a task and add a schedule to run it regularly, and send results to Slack, email, webhooks, Zapier, Make or n8n with Apify integrations. AI agents can find and run it through the Apify MCP server.

from apify_client import ApifyClient

client = ApifyClient("YOUR_APIFY_TOKEN")
run = client.actor("sterlingverify/ssl-expiry-monitor").call(run_input={"domains": ["example.com"], "warnDays": 21})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

FAQ

Does it scan my server?

No. It makes one standard TLS handshake per domain, the same as a browser opening the site.

Why can results differ from my browser?

It is a point-in-time check from Apify's network, so results can differ by location or CDN edge.

Disclaimer

A point-in-time check from Apify's network; results can differ by location or CDN edge. Only check domains you own or have a legitimate interest in.

Related sterlingVerify tools

Part of the sterlingVerify UK payments, KYB and data toolkit on Apify Store:

• PSP Status Monitor: outage alerts from payment provider status pages
• npm & PyPI Package Health Check: npm and PyPI vulnerability, licence and maintenance check
• PCI Readiness Scanner: passive checkout security check with a likely SAQ type
• Structured Data Extractor: schema.org JSON-LD and Open Graph data from any page